Solved: Pix 515 2 ISP's Question

lreger · ‎10-19-2008

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of? My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover.

abinjola · ‎10-19-2008

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

View solution in original post

abinjola · ‎10-19-2008

ok..

I have a customer with a cisco pix 515. Is there a way to have 2 seperate configs on the pix and be able to quickly select which config you want to boot off of?

--YES YOU MAY CONFIGURE YOUR PIX 515E IN MULTIPLE CONTEXT

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808d2b63.shtml

My customer has been having problems lately with his primary ISP which happens to be the faster connection between the 2 and when it goes down he has to manually make the IP changes on the pix to perform the switchover

--YOU MAY CONFIGURE "DUAL ISP FEATURE".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

lreger · ‎10-20-2008

Thanks for the links. I have one more question for you. If my customer has site to site vpn's and remote users connected with the Cisco VPN client and the primary connection goes down and the backup connections comes up with the DUAL ISP Feature will the remote users still be able to VPN in or will they have to have 2 profiles for each external address?

abinjola · ‎10-20-2008

--you need two profiles on VPN Client

--You need to enable crypto map one each on ISP1 interface and ISP 2 interface

okuehn · ‎11-22-2008

you can use one profile by setting up the ispbackup interface ip as a backup server in the VPN pcf file.

we have successfully implemented and tested this solution. hope this helps!

suschoud · ‎10-21-2008

multiple context does not support static route tracking,alternatively isp fallback.

So,you would not be able to run both simultaneously.

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/t_72.html#wp1382341

command : track rtr

Regards,

Sushil ;-)